Does boxify.es use cookies?

boxify.es uses 7 cookies. No consent management platform was detected.

Does boxify.es use a cookie banner (CMP)?

No consent management platform (cookie banner) was detected on boxify.es. Since the site sets non-essential cookies or loads third-party trackers, it may not meet GDPR and ePrivacy prior-consent requirements.

Which third-party trackers does boxify.es use?

boxify.es loads 22 third-party requests from 9 vendors, including Google LLC, HubSpot, PostHog, Stripe, Stripe Inc..

How many marketing and analytics cookies does boxify.es set?

boxify.es sets 1 marketing and 0 analytics cookies, alongside 4 strictly necessary cookies. Under GDPR and the ePrivacy Directive, non-essential cookies require prior consent.

boxify.es

Item: boxify.es
Rating: 52
Author: Passiro

https://boxify.es

Last scanned August 16, 2026

A cookie scan of boxify.es performed on August 16, 2026 found 7 cookies and 22 third-party tracking requests. The assessment covered 10 pages across 10 unique page templates. No consent management platform was detected. Our check observed 22 third-party requests from 9 vendors; non-essential tracking of this kind requires prior consent under the ePrivacy Directive.

Claim & unlock

Third-party

Trackers

Vendors

Consent banner

None detected

Scans

What this setup is missing

No consent management platform was detected.

Compliance by audience

European Union

✗ Not met

GDPR + ePrivacy · Prior consent (opt-in)

United Kingdom

✗ Not met

UK GDPR + PECR · Consent-based

United States

✓ Meets this model

CCPA/CPRA + state laws · Notice & opt-out

Canada

! Needs attention

PIPEDA + Québec Law 25 · Consent-based

Brazil

! Needs attention

LGPD · Consent-based

Scanned from the EU; sites may serve different banners or tracking to other regions. Verdicts reflect observed behaviour measured against each audience's rules.

Connection security

HTTPS supported

✓

Redirects HTTP to HTTPS

✓

HSTS

✓

Content Security Policy

✗

Cookies

7 cookies detected: 4 necessary, 0 analytics, 1 marketing

Total

Necessary

Functional

Analytics

Marketing

Unknown

Filter by category

Name	Domain	Category	Provider	Expiry	Secure	HttpOnly	Party
_fbp before consent	.boxify.es	Marketing	Facebook	90 d	–	–	1st
__cf_bm	.boxify.es	Necessary	Cloudflare	Expired	✓	✓	1st
__cf_bm	.www.boxify.es	Necessary	Cloudflare	Expired	✓	✓	1st
__stripe_mid	.www.boxify.es	Necessary	Stripe	365 d	✓	–	1st
__stripe_sid	.www.boxify.es	Necessary	Stripe	Expired	✓	–	1st
ph_phc_48bSAIlmr4FvL4DRQozFBa8Ly30QHy1B0BpAB3umCz9_posthog before consent	.boxify.es	Unknown	-	365 d	✓	–	1st
_newboxify_session before consent	www.boxify.es	Unknown	-	Session	✓	✓	1st

Browser storage set by the site

Name	Domain	Party
__mplssupport__ set by eu-assets.i.posthog.com/array.js:1:45397	https://www.boxify.es	1st	before consent
__support__ set by eu-assets.i.posthog.com/array.js:1:46098	https://www.boxify.es	1st	before consent
ph_phc_48bSAIlmr4FvL4DRQozFBa8Ly30QHy1B0BpAB3umCz9_posthog set by eu-assets.i.posthog.com/array.js:1:46098	https://www.boxify.es	1st	before consent
ph_phc_48bSAIlmr4FvL4DRQozFBa8Ly30QHy1B0BpAB3umCz9_posthog set by eu-assets.i.posthog.com/array.js:1:45397	https://www.boxify.es	1st	before consent
ph_phc_48bSAIlmr4FvL4DRQozFBa8Ly30QHy1B0BpAB3umCz9_primary_window_exists set by eu-assets.i.posthog.com/array.js:1:46098	https://www.boxify.es	1st	before consent
test set by eu-assets.i.posthog.com/array.js:1:234149	https://www.boxify.es	1st	before consent
ph_phc_48bSAIlmr4FvL4DRQozFBa8Ly30QHy1B0BpAB3umCz9_session_registered_properties set by eu-assets.i.posthog.com/array.js:1:46098	https://www.boxify.es	1st	before consent
lastExternalReferrer set by connect.facebook.net/fbevents.js:196:242	https://www.boxify.es	1st	before consent
lastExternalReferrerTime set by connect.facebook.net/fbevents.js:196:242	https://www.boxify.es	1st	before consent
ph_phc_48bSAIlmr4FvL4DRQozFBa8Ly30QHy1B0BpAB3umCz9_window_id set by eu-assets.i.posthog.com/array.js:1:46098	https://www.boxify.es	1st	before consent

Third-Party Trackers

22 requests detected from 9 vendors: Google LLC, HubSpot, PostHog, Stripe, Stripe Inc....

Analytics

Marketing

Necessary

Functional

Other

Vendor	Category	Type	Domain
Google LLC before consent Google Tag Manager	Analytics	script	www.googletagmanager.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	js-eu1.hs-analytics.net
PostHog before consent PostHog tracker domain (source: Disconnect.me, category: Analytics)	Analytics	script	eu-assets.i.posthog.com
Stripe before consent Stripe tracker domain (source: Disconnect.me, category: Content)	Analytics	script	r.stripe.com
Stripe Inc. before consent Stripe fraud detection	Analytics	script	m.stripe.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	js-eu1.hs-scripts.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	js-eu1.hs-banner.com
HubSpot before consent HubSpot tracker domain (source: Disconnect.me, category: Advertising)	Marketing	script	js-eu1.hsadspixel.net
HubSpot Inc. before consent HubSpot marketing & CRM	Marketing	script	meetings-eu1.hubspot.com
LinkedIn Corporation before consent LinkedIn Insight Tag	Marketing	script	snap.licdn.com
LinkedIn Corporation before consent LinkedIn Ads tracking	Marketing	pixel	px.ads.linkedin.com
Meta Platforms, Inc. before consent Facebook SDK / Pixel	Marketing	script	connect.facebook.net
Meta Platforms, Inc. before consent Facebook tracking pixel	Marketing	pixel	www.facebook.com
Google LLC Google Fonts stylesheet	Necessary	script	fonts.googleapis.com
Google LLC Google Fonts files	Necessary	script	fonts.gstatic.com
HubSpot HubSpot tracker domain (source: Disconnect.me, category: Content)	Necessary	script	static.hsappstatic.net
HubSpot HubSpot tracker domain (source: Disconnect.me, category: Content)	Necessary	script	js-eu1.usemessages.com
Stripe Inc. Stripe payment processing	Necessary	script	js.stripe.com
Volentio JSD Volentio JSD tracker domain (source: Disconnect.me, category: Content)	Necessary	script	cdn.jsdelivr.net
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	pagead2.googlesyndication.com
Google LLC before consent Google tracker domain (source: Disconnect.me, category: FingerprintingGeneral)	Unknown	script	region1.google-analytics.com
Stripe before consent Stripe tracker domain (source: Disconnect.me, category: FingerprintingInvasive)	Unknown	script	m.stripe.network